Zabbix has been replaced by Prometheus for monitoring our services.

Remove orion

See merge request archlinux/infrastructure!145

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

Orion has been replaced by gemini and for mail by mail.archlinux.org

Onboard bastelfreak

See merge request archlinux/infrastructure!140

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

https://lists.archlinux.org/pipermail/aur-general/2020-November/036011.html

Docker is now build in Gitlab CI

See merge request archlinux/infrastructure!144

Jelle van der Waa authored 4 years ago and Jelle van der Waa committed 4 years ago

We no longer need this role as Gitlab handles it now.

roles/archwiki: purge the nginx cache after pulling from the archwiki git repo

See merge request archlinux/infrastructure!125

This basically reverts back freswa's work on this as we need the manual control here.

It used to be Debian pfff

rebuilderd-worker now supports an diffoscope output limit allowing us to
define how much data will be POST'ed to rebuilderd via nginx.

As we have no archive_mirrors at this time.

Rebuilderd since 0.6.0 supports the X-Real-IP header to show what
builder is working on a task.

enhance project creation/migration docs

See merge request !142

Add Junior DevOps text

See merge request !138

Give freswa full DevOps access

See merge request !141

add dovecot cleanup timer to purge mdbox files

See merge request !135

While mbox and maildir files get deleted by dovecot right away, that's
not the case for mdbox files. Since they contain multiple mails at once
in a proprietary format rewriting is expensive. That's why this step
is done in a separate step outside the dovecot process.

Replace SpamAssassin with Rspamd

See merge request !42

Kristian Klausen authored 4 years ago and Sven-Hendrik Haase committed 4 years ago

Switching to Rspamd has some advantages:
* It is probably faster than SA[1] (C + Lua vs Perl)
* We can reduce the number of moving parts. Rspamd has built-in DKIM
  signing, greylisting, DMARC checking to name a few
* It doesn't just mark the mail as spam/not-spam, it gives every mail a
  score and depending on the score it does either: nothing, greylist it,
  mark it as spam or reject it[2] (more actions is available and it can
  be tweaked)
* Replies whitelisting[3]
* It supports ARC signing, which can be useful
* A cool looking WebUi :)
* ... and more[4]...

[1] https://rspamd.com/doc/tutorials/migrate_sa.html#why-migrate-to-rspamd
[2] https://rspamd.com/doc/faq.html#what-are-rspamd-actions
[3] https://rspamd.com/doc/modules/replies.html
[4] https://rspamd.com/comparison.html

rebuilderd-worker can now post diffoscope html output to rebuilderd
whcih requires raising our POST size.

We need to match the tmpfiles.d/turnserver.conf settings.

Less work_mem because this explodes easily. It's per-operation, which a
query can have multiple of, and also across multiple worker threads.

More shared_buffers and effective_cache_size as these are global.

Add server decommissioning template

See merge request !136

fix mx record for aur. and master-key.

See merge request !137